Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/EsWbK2LVeEBhX1cm_tdgEjs4k0Y.roa
File: EsWbK2LVeEBhX1cm_tdgEjs4k0Y.roa (raw, json)
Hash identifier: JtQACVF2aPVFhlSuOxcncC6wnVR0ONlFs3OvPcdaiGg=
Subject key identifier: 12:C5:9B:2B:62:D5:78:40:61:5F:57:26:FE:D7:60:12:3B:38:93:46
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 0187EAF671108C25A79B1595E150D2A66AA9
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/EsWbK2LVeEBhX1cm_tdgEjs4k0Y.roa
Signing time: Fri 05 May 2023 08:10:32 +0000
ROA not before: Fri 05 May 2023 08:10:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9110
IP address blocks: 212.233.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:f6:71:10:8c:25:a7:9b:15:95:e1:50:d2:a6:6a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: May 5 08:10:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12c59b2b62d57840615f5726fed760123b389346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:00:70:3b:af:66:ba:8d:bc:e3:db:db:9c:
91:71:d4:b1:93:61:1e:8e:11:4a:fd:61:a0:7e:9f:
53:24:a5:f1:b1:a3:f6:39:03:33:9e:14:22:af:f8:
87:fd:11:2c:1f:da:58:bf:a1:5f:c2:a7:3c:fa:bc:
c9:1b:8d:d5:88:e8:77:d4:e2:9a:7a:d3:07:67:3b:
e3:6a:e8:cd:f3:4e:62:85:4d:f7:32:dd:d6:93:7c:
57:c8:1a:cf:a6:65:83:be:02:13:c1:a1:86:ec:f9:
3c:49:79:a0:56:9d:e8:2b:91:9e:6e:d9:fd:3a:12:
d9:cf:ab:9d:91:7a:59:27:dc:2d:18:90:43:e5:57:
91:a3:9a:b7:60:00:6a:ed:46:d9:5b:63:a2:01:d1:
94:51:6f:f2:65:78:5d:69:8e:6f:0e:1a:07:dc:1c:
b7:02:3f:5d:76:34:e1:a2:d0:e2:1b:1e:47:69:2b:
7b:16:ea:e1:b6:1f:02:bb:57:f0:f7:0d:94:66:61:
02:96:3f:a1:d4:c1:96:c3:ca:97:b0:bd:66:bf:4d:
95:ab:a0:8e:88:ff:26:f9:5c:57:9a:ac:9e:73:f3:
98:39:bf:30:dd:02:8b:df:ea:e1:0e:3a:53:6d:9b:
e9:62:b5:d2:76:cc:6e:9e:ce:8a:c7:4d:2b:26:c4:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:9B:2B:62:D5:78:40:61:5F:57:26:FE:D7:60:12:3B:38:93:46
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/EsWbK2LVeEBhX1cm_tdgEjs4k0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.233.68.0/22
Signature Algorithm: sha256WithRSAEncryption
70:88:5c:06:34:61:83:c8:b8:05:52:a7:1d:2c:79:63:6f:6d:
16:5c:5a:22:3f:63:08:5b:f9:7c:70:83:9d:2d:e5:52:6f:f3:
63:02:92:98:ff:71:b1:14:42:d1:1d:96:d5:ee:30:3f:e8:4c:
d7:75:0b:68:60:db:1d:08:39:0c:0f:d4:bf:5e:c2:ff:31:5a:
89:b6:dc:58:59:ed:28:0a:31:6f:cb:76:6a:dd:c6:71:a7:0a:
c1:06:c7:da:db:f5:2c:72:3e:d0:d1:ae:78:09:45:39:a0:73:
0a:87:46:fc:3f:b7:b8:ae:42:18:c5:ff:ec:1d:c0:52:fe:9c:
79:ba:91:b4:d4:9d:82:7b:65:80:2a:59:26:80:d3:d2:83:7c:
d5:8d:a7:ce:2f:15:33:c7:e6:aa:10:71:b2:fb:ea:b9:58:f1:
a6:44:f8:fe:16:3e:75:ba:0c:20:ed:6a:61:a2:fd:5b:de:69:
57:82:2b:e5:ef:17:38:2f:19:7f:a5:80:b7:02:87:c3:39:90:
83:76:e1:39:35:8e:79:76:23:9b:12:dc:b6:b8:1a:91:40:64:
75:bb:a8:47:c1:ca:73:da:97:85:d4:c2:ab:fb:ed:e1:92:ad:
16:31:6d:2f:34:29:6d:de:6f:42:30:66:30:ef:21:77:be:cf:
eb:c8:df:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfq9nEQjCWnmxWV4VDSpmqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYmUxMTg0M2RiZTgwMzQwYjI0NjBmYzE2MGVjNmI5Yjg4
ZjIyMmEwHhcNMjMwNTA1MDgxMDMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmM1OWIyYjYyZDU3ODQwNjE1ZjU3MjZmZWQ3NjAxMjNiMzg5MzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS0AcDuvZrqNvOPb25yRcdSxk2Ee
jhFK/WGgfp9TJKXxsaP2OQMznhQir/iH/REsH9pYv6Ffwqc8+rzJG43ViOh31OKa
etMHZzvjaujN805ihU33Mt3Wk3xXyBrPpmWDvgITwaGG7Pk8SXmgVp3oK5Gebtn9
OhLZz6udkXpZJ9wtGJBD5VeRo5q3YABq7UbZW2OiAdGUUW/yZXhdaY5vDhoH3By3
Aj9ddjThotDiGx5HaSt7Furhth8Cu1fw9w2UZmEClj+h1MGWw8qXsL1mv02Vq6CO
iP8m+VxXmqyec/OYOb8w3QKL3+rhDjpTbZvpYrXSdsxuns6Kx00rJsSfOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBLFmyti1XhAYV9XJv7XYBI7OJNGMB8GA1UdIwQY
MBaAFHq+EYQ9voA0CyRg/BYOxrm4jyIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUt
MzQxMWM2ZmI0ZmNhLzEvRXNXYksyTFZlRUJoWDFjbV90ZGdFanM0azBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUtMzQxMWM2ZmI0ZmNh
LzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1OlEMA0G
CSqGSIb3DQEBCwUAA4IBAQBwiFwGNGGDyLgFUqcdLHljb20WXFoiP2MIW/l8cIOd
LeVSb/NjApKY/3GxFELRHZbV7jA/6EzXdQtoYNsdCDkMD9S/XsL/MVqJttxYWe0o
CjFvy3Zq3cZxpwrBBsfa2/Uscj7Q0a54CUU5oHMKh0b8P7e4rkIYxf/sHcBS/px5
upG01J2Ce2WAKlkmgNPSg3zVjafOLxUzx+aqEHGy++q5WPGmRPj+Fj51ugwg7Wph
ov1b3mlXgivl7xc4Lxl/pYC3AofDOZCDduE5NY55diObEty2uBqRQGR1u6hHwcpz
2peF1MKr++3hkq0WMW0vNClt3m9CMGYw7yF3vs/ryN+Z
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:52 2025 by rpki-client